7-Technologies IGSS < 9.0.0.11129 Multiple DoS Vulnerabilities

Medium Nessus Plugin ID 54291

Synopsis

The remote Windows host contains a SCADA application that is affected by multiple denial of service vulnerabilities.

Description

The installed version of IGSS from 7-Technologies is earlier than 9.0.0.11129 and is, therefore, reportedly affected by several denial of service vulnerabilities.

Using specially crafted packets to the IGSSdataServer service listening on TCP port 12401 or the dc.exe service on TCP port 12397, an unauthenticated, remote attacker can crash the 7T data server, thereby denying service to legitimate users.

Solution

Apply the IGSS Update to upgrade to IGSS version 9.0.0.11129 or later.

See Also

http://www.7t.dk/igss/igssupdates/v90/progupdatesv90.zip

Plugin Details

Severity: Medium

ID: 54291

File Name: scada_igss_9_0_0_11129.nbin

Version: 1.32

Type: local

Family: SCADA

Published: 2011/05/16

Modified: 2018/12/14

Dependencies: 52961

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Temporal Score: 4.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:schneider-electric:interactive_graphical_scada_system

Required KB Items: SCADA/Apps/7T/IGSS/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2011/05/12

Vulnerability Publication Date: 2011/05/12

Reference Information

BID: 47864

ICS-ALERT: 11-132-01